Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft
File: 1-XhhvCSEodMubzbMLEayFG4xW8E.mft (raw, json)
Hash identifier: ihK9LEzFjuqviITcHZ0jE5JFGzrUuWg7yOPb+Oe4RnU=
Subject key identifier: 6A:33:4E:34:41:4E:CA:CC:A2:D0:7D:21:ED:F4:DC:2A:44:FC:E4:63
Authority key identifier: F9:78:61:BC:24:84:A1:D3:2E:6F:36:CC:2C:46:B2:14:6E:31:5B:C1
Certificate issuer: /CN=f97861bc2484a1d32e6f36cc2c46b2146e315bc1
Certificate serial: 0195C72B766DB7F55E165ED39646F156DD8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XhhvCSEodMubzbMLEayFG4xW8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft
Manifest number: 0983
Signing time: Mon 24 Mar 2025 08:01:09 +0000
Manifest this update: Mon 24 Mar 2025 08:01:09 +0000
Manifest next update: Tue 25 Mar 2025 08:01:09 +0000
Files and hashes: 1: 1-XhhvCSEodMubzbMLEayFG4xW8E.crl (hash: 1BgmhuNIJTyg5r+z4q0q4msmTc4Ot1AG/RgZnNDBmMU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:2b:76:6d:b7:f5:5e:16:5e:d3:96:46:f1:56:dd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97861bc2484a1d32e6f36cc2c46b2146e315bc1
Validity
Not Before: Mar 24 08:01:09 2025 GMT
Not After : Mar 25 08:01:09 2025 GMT
Subject: CN=6a334e34414ecacca2d07d21edf4dc2a44fce463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:6f:58:9c:b6:05:87:2c:15:d8:81:51:56:
52:49:d7:ac:a6:ba:68:05:e5:d0:ce:4d:a4:8a:89:
f9:fd:a2:2e:ef:25:15:c0:ec:68:33:5b:e1:61:26:
d3:be:38:7d:e2:64:9a:32:e7:97:ad:11:82:4c:a3:
28:11:a3:28:11:cc:97:23:cd:1a:4e:a8:2d:dd:93:
ae:92:fa:19:64:41:97:9e:2c:a7:e2:5f:85:a2:bd:
11:c4:b5:b9:3d:a3:58:79:3f:55:13:68:7a:7a:b8:
fc:d4:98:a7:a3:0a:9d:99:28:84:e3:70:e4:ef:1b:
a1:b3:6a:6b:06:d3:df:a2:2a:ab:fd:87:de:76:17:
f8:34:3d:f2:08:73:83:48:fa:57:ab:22:0e:e3:80:
52:bf:7b:bb:27:9d:d8:83:46:ed:cd:1a:7a:65:c0:
55:35:98:94:9b:2a:e7:a0:77:dd:74:84:af:a1:58:
68:5e:a8:aa:c8:e5:eb:1d:ae:30:cd:65:02:d0:b8:
3a:24:8e:93:ac:49:2b:f6:d0:c6:e4:87:10:f0:d5:
2f:b1:15:b6:6f:19:7c:da:a2:d3:5e:dc:85:5b:d5:
fe:ba:e5:4c:50:c8:75:1b:8b:50:3f:ee:81:76:a9:
d3:23:db:31:42:a5:b6:8e:96:eb:ab:33:21:eb:22:
de:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:33:4E:34:41:4E:CA:CC:A2:D0:7D:21:ED:F4:DC:2A:44:FC:E4:63
X509v3 Authority Key Identifier:
keyid:F9:78:61:BC:24:84:A1:D3:2E:6F:36:CC:2C:46:B2:14:6E:31:5B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XhhvCSEodMubzbMLEayFG4xW8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:07:c0:03:8d:46:e9:73:fb:f2:f0:bf:73:14:dc:01:8a:ee:
3e:80:c9:57:39:77:5a:c5:17:1d:05:58:19:a9:6f:7f:d3:fb:
5a:54:a7:c5:0a:64:2e:87:f5:81:27:9f:62:76:01:30:b5:3a:
02:91:32:2a:74:b8:48:12:41:fb:34:28:19:27:f0:04:ce:9a:
b9:71:b0:b8:66:0d:98:34:93:30:79:13:2f:3d:15:00:d3:97:
72:2c:07:9e:01:02:ca:77:3f:0b:fa:7a:25:22:66:60:dc:b4:
4f:48:b4:de:de:79:27:e1:65:27:18:8d:f4:49:12:44:76:47:
a1:3e:d2:78:28:43:6c:74:88:21:ce:cf:0b:ba:02:50:6d:4a:
73:42:57:2e:4b:69:97:f0:4e:aa:e8:dd:19:81:79:fc:05:3c:
e4:9c:9a:dd:25:0e:76:48:ba:0b:d4:95:1b:84:80:3a:db:6d:
80:83:2e:87:c4:42:47:30:d5:60:58:ec:c5:b6:94:b5:c4:d0:
14:b7:76:75:50:c4:e5:80:bb:ff:3f:ae:9c:64:10:1e:76:62:
2a:92:ac:70:00:62:d2:f8:a5:90:f5:d3:e2:a9:3c:3c:57:d7:
1c:d4:a8:12:9b:2a:de:95:07:d4:26:98:bf:0f:eb:d8:aa:63:
76:a8:2d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:08:29 2025 by rpki-client